CVE-2005-1062
Summary
| CVE | CVE-2005-1062 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-05-02 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Kerio Mailserver | 6.0.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.8 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.10 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.11 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.12 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.13 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.14 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.15 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.16 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.7 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.8 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.9 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.0 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.0 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| research.tic.udc.es/scg/advisories/20050429-1.txt | af854a3a-2127-422b-91ae-364da2661108 | research.tic.udc.es | |
| Kerio Technologies | Technical Support | Security Advisory | af854a3a-2127-422b-91ae-364da2661108 | www.kerio.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.